Option Explicit
'On Error Resume Next
Dim objWMIService
Dim propValue
Dim objItem
Dim colItems
Dim nse
Dim objDCInstance
Dim objDataClass
Dim objDataRow
Dim temp1, temp2

'Create instance of Altiris NSE component
set nse = WScript.CreateObject ("Altiris.AeXNSEvent")

' Set the header data of the NSE
' Please don't modify this GUID
nse.To = "{1592B913-72F3-4C36-91D2-D4EDA21D2F96}"
nse.Priority = 1

'Create Inventory data block. Here assumption is that the data class with below guid is already configured on server
set objDCInstance = nse.AddDataClass ("{insert custom data class guid}")

set objDataClass = nse.AddDataBlock (objDCInstance)

'Fire WMI Query
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\.\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_NTLogEvent where logfile='system' and eventcode='6005'")
For Each objItem in colItems
temp2 = objItem.TimeGenerated
If temp1 = "" Then
temp1 = temp2
ElseIf temp2 > temp1 Then
temp1 = temp2
End If
Next

'Set columns
set objDataRow = objDataClass.AddRow
objDataRow.SetField 0, temp1

nse.SendQueued